openSUSE-SU-2017:0739-1 Security update for irssi
A use-after-free vulnerability in the IRC client irssi allows remote attackers to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is openSUSE-SU-2017:0739-1?
openSUSE-SU-2017:0739-1 is an use after free vulnerability in irssi, published on 17 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
This update to irssi 1.0.2 fixes security issues and bugs.
The following vulnerabilities were fixed:
boo#1029020: Use after free while producing list of netjoins
The following non-security changes are included:
- Fix in command arg parser to detect missing arguments in tail place
- Fix regression that broke incoming DCC file transfers
- Fix issue with escaping \ in evaluated strings
- improve UTF8 support in GRegex
Which versions are affected by openSUSE-SU-2017:0739-1?
Linux distribution packages (1)
irssi SUSE:Package Hub 12 | All versions | 1.0.2-21.1 |
How do I fix openSUSE-SU-2017:0739-1?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is openSUSE-SU-2017:0739-1 being exploited?
There is no known exploitation of openSUSE-SU-2017:0739-1 in the wild and no public exploit code.